Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: cwXONfNl0sbF14cNqVibVylihhGRimPe1vf28ki+m2o=
Subject key identifier: 9E:84:CB:CE:A2:75:7E:5D:AE:E9:16:16:6A:FC:FF:A5:C9:93:DF:F7
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 0199179AD0DD0CAE92C5D322CEB06C07737D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 137B
Signing time: Fri 05 Sep 2025 02:00:45 +0000
Manifest this update: Fri 05 Sep 2025 02:00:45 +0000
Manifest next update: Sat 06 Sep 2025 02:00:45 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: UD45139xdY7L3L5lsielLTUvYTV+8h2Bf7SvQbj6aSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:d0:dd:0c:ae:92:c5:d3:22:ce:b0:6c:07:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Sep 5 02:00:45 2025 GMT
Not After : Sep 6 02:00:45 2025 GMT
Subject: CN=9e84cbcea2757e5daee916166afcffa5c993dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:24:48:b8:de:d6:e3:ae:d7:96:61:85:1b:
80:63:5a:4b:95:d7:a4:12:cf:e0:08:17:78:f8:33:
0f:da:e4:fb:00:fb:42:70:d9:f4:78:d9:af:eb:20:
ee:be:19:b5:56:65:4c:70:a5:04:63:a3:c3:3c:d6:
87:47:ce:b2:cb:40:0a:d2:84:d9:8a:c4:05:a7:59:
31:3b:01:9d:4b:89:49:23:98:5f:4d:d1:b1:c3:89:
c3:18:47:f9:c2:52:34:69:cc:1e:79:c3:bc:b5:33:
12:77:26:a2:11:1a:cd:ce:50:34:17:b1:8b:5c:74:
80:9d:23:a6:d0:7b:39:c7:54:95:e0:5e:95:79:53:
68:db:35:32:6a:e3:e6:fb:d8:aa:c2:75:20:91:5d:
7f:7c:02:e8:20:ff:7f:7a:39:1a:3d:b6:74:63:08:
00:c0:14:da:35:69:ac:dd:9e:8c:cb:27:40:d2:61:
58:f6:f4:39:98:98:0c:c5:8d:82:a2:53:e3:1e:39:
53:2a:bf:f0:84:fa:06:ff:58:13:da:7c:0c:e5:bb:
2c:f6:49:1e:2c:9c:39:b9:16:5c:c1:66:79:81:1d:
2b:02:10:6a:e7:58:8a:00:dd:3f:73:4b:57:f1:93:
8c:d8:0c:d3:ba:3a:a3:d9:04:7e:21:2f:46:ec:70:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:CB:CE:A2:75:7E:5D:AE:E9:16:16:6A:FC:FF:A5:C9:93:DF:F7
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:b0:d1:71:df:5c:30:20:9a:a4:24:5e:45:b8:b4:63:16:
06:de:bc:b8:d2:72:29:47:e1:23:6e:6d:57:8a:e5:e8:6e:18:
89:be:e4:ec:88:65:c4:52:5c:ee:f3:a3:83:3b:6e:b2:c0:41:
60:ab:07:38:5f:00:2d:91:ce:b4:01:8e:eb:13:98:74:a8:03:
be:49:60:63:65:16:f0:93:86:c1:07:ec:f2:7d:97:0e:35:92:
05:55:bd:7c:d5:79:1d:23:2b:25:4c:fb:55:d2:ee:23:96:f0:
b3:8e:d0:80:5f:a8:63:2b:33:c1:11:46:72:cb:e9:e7:4d:5f:
af:f3:c8:d6:27:42:e5:b6:99:15:6d:4c:26:2d:6e:cf:a3:ea:
b5:ff:8d:ae:05:74:7b:da:12:d8:40:4d:df:a3:c5:b4:47:ac:
38:d3:a5:ef:d6:9a:3b:2f:23:22:6c:b5:ad:e7:1f:3a:37:6a:
25:5d:a5:46:a7:68:fa:d9:d7:23:44:2b:5a:a1:eb:86:c0:a5:
87:bf:0f:b0:dd:ce:5a:de:52:87:e9:b3:5f:09:c9:c9:c4:41:
d3:f0:1a:66:ce:8e:db:1d:f9:74:9f:0d:9e:a5:37:dd:a1:3f:
58:09:91:0f:bb:f2:ab:0b:6c:7b:bc:2a:ce:4b:e0:fd:f3:bc:
12:57:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:24 2025 by rpki-client